Exploitation Summary
EIP tracks 1 public exploit for CVE-2024-22026. PoCs published by securekomodo.
AI-analyzed exploit summary This repository contains a functional exploit PoC for CVE-2024-22026, a local privilege escalation vulnerability in Ivanti EPMM (MobileIron Core). The exploit leverages the software update process to install a malicious RPM package, granting root access via preinstall and postinstall scripts.
Description
A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local user to bypass shell restriction and execute arbitrary commands on the appliance.
Exploits (1)
This repository contains a functional exploit PoC for CVE-2024-22026, a local privilege escalation vulnerability in Ivanti EPMM (MobileIron Core). The exploit leverages the software update process to install a malicious RPM package, granting root access via preinstall and postinstall scripts.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H